install LLVM in action instead of sh script

.github/actions/setup_native_deps/action.yml

@@ -22,9 +22,18 @@ runs:
         key:
           ${{ runner.os }}-llvm-19-${{ hashFiles('scripts/dependencies.sh') }}
 
-    - name: Install Cairo Native Runtime Dependencies
+    - name: Add LLVM Debian repository
+      if: steps.cache-llvm.outputs.cache-hit != 'true'
+      uses: myci-actions/add-deb-repo@11
+      with:
+        repo: deb http://apt.llvm.org/jammy/ llvm-toolchain-jammy-19 main
+        repo-name: llvm-repo
+        keys-asc: https://apt.llvm.org/llvm-snapshot.gpg.key
+    - name: Update and upgrade APT
+      if: steps.cache-llvm.outputs.cache-hit != 'true'
+      shell: bash
+      run: sudo apt-get update && sudo apt-get upgrade -y
+    - name: Install LLVM
       if: steps.cache-llvm.outputs.cache-hit != 'true'
-      id: set-runtime-deps
       shell: bash
-      run: |
-        bash ./scripts/dependencies.sh
+      run: sudo apt-get install llvm-19 llvm-19-dev llvm-19-runtime clang-19 clang-tools-19 lld-19 libpolly-19-dev libmlir-19-dev mlir-19-tools

.github/workflows/ci.yml

@@ -8,8 +8,6 @@ on:
     branches:
       - main
 
-permissions: read-all
-
 jobs:
   trunk:
     name: Trunk

.github/workflows/test.yml

@@ -13,6 +13,10 @@ jobs:
   test:
     # trunk-ignore(actionlint/runner-label)
     runs-on: ubuntu-latest-16-cores
+    env:
+      MLIR_SYS_190_PREFIX: /usr/lib/llvm-19/
+      LLVM_SYS_191_PREFIX: /usr/lib/llvm-19/
+      TABLEGEN_190_PREFIX: /usr/lib/llvm-19/
     timeout-minutes: 45
     steps:
       - uses: actions/checkout@v4

.github/workflows/trunk-check.yml

@@ -11,6 +11,10 @@ jobs:
   trunk_check:
     name: Trunk Check Runner
     runs-on: ubuntu-latest
+    env:
+      MLIR_SYS_190_PREFIX: /usr/lib/llvm-19/
+      LLVM_SYS_191_PREFIX: /usr/lib/llvm-19/
+      TABLEGEN_190_PREFIX: /usr/lib/llvm-19/
     # trunk-ignore(checkov/CKV2_GHA_1)
     permissions:
       checks: write # For trunk to post annotations

scripts/dependencies.sh

@@ -30,11 +30,9 @@ function setup_llvm_deps() {
         brew install llvm@19
         ;;
     Linux)
-        $SUDO bash -c 'curl https://apt.llvm.org/llvm.sh -Lo llvm.sh
-        bash ./llvm.sh 19 all
-        rm -f ./llvm.sh
-        apt update && apt install -y \
+        $SUDO bash -c 'apt update && apt-get install -y \
             libgmp3-dev \
+            llvm-19 \
             libmlir-19-dev \
             libpolly-19-dev \
             libzstd-dev \